Sergei Vasilev
76 lines
3.9 KiB
Markdown
76 lines
3.9 KiB
Markdown
---
|
|
task: Полный аудит iqon.com и план изменений
|
|
slug: 20260519-224203_full-iqon-audit-plan
|
|
effort: extended
|
|
phase: complete
|
|
progress: 20/20
|
|
mode: interactive
|
|
started: 2026-05-19T22:42:03+03:00
|
|
updated: 2026-05-19T22:47:52+03:00
|
|
---
|
|
|
|
# Полный аудит iqon.com и план изменений
|
|
|
|
Purpose: зафиксировать проверяемый аудит live-сайта `iqon.com` и план изменений с опорой на Open Design.
|
|
|
|
## Context
|
|
|
|
Сергей попросил сделать полный аудит `iqon.com`, использовать skill `opendesign` и подготовить план необходимых изменений. В доступном списке нет skill с точным именем `opendesign`; использованы Open Design skill entries `design-review` и `frontend-design`. В рамках задачи не запрошены live-изменения, деплой, доступ к админке или перенос секретов.
|
|
|
|
### Risks
|
|
|
|
- Live WordPress core version is not directly confirmed; avoid stale exact-version claims.
|
|
- Visual audit is based on HTML/CSS evidence, not browser screenshots.
|
|
- Security recommendations must not imply remote changes were performed.
|
|
|
|
## Criteria
|
|
|
|
- [x] ISC-1: OpenDesign design-review skill entry inspected
|
|
- [x] ISC-2: OpenDesign frontend-design skill entry inspected
|
|
- [x] ISC-3: Codex iqon project memory inspected
|
|
- [x] ISC-4: Local prior design audit inspected
|
|
- [x] ISC-5: Live homepage headers inspected
|
|
- [x] ISC-6: Live homepage HTML inspected
|
|
- [x] ISC-7: Live stylesheet inspected for layout signals
|
|
- [x] ISC-8: Live sitemap index inspected
|
|
- [x] ISC-9: Live page sitemap inspected
|
|
- [x] ISC-10: Sitemap duplicate counts computed
|
|
- [x] ISC-11: Live REST users endpoint inspected
|
|
- [x] ISC-12: Live contact page inspected
|
|
- [x] ISC-13: Live readme exposure inspected
|
|
- [x] ISC-14: Local redesign prototype inspected
|
|
- [x] ISC-15: Audit document created in project root
|
|
- [x] ISC-16: Audit document lists prioritized findings
|
|
- [x] ISC-17: Audit document includes implementation plan
|
|
- [x] ISC-18: Audit separates current facts from stale memory
|
|
- [x] ISC-19: Audit avoids credential values
|
|
- [x] ISC-20: Verification evidence recorded in PRD
|
|
|
|
## Decisions
|
|
|
|
- Create a new current audit document rather than overwrite prior `iqon-design-audit.md`.
|
|
- Treat prior WP 4.9.13 claim as historical until core version is separately confirmed.
|
|
- Recommend static/light redesign path unless WordPress editing must remain a hard requirement.
|
|
|
|
### Plan
|
|
|
|
1. Create a current audit markdown document in the project root.
|
|
2. Separate verified live findings from stale/historical memory.
|
|
3. Prioritize quick hardening, SEO/accessibility cleanup, and full redesign work.
|
|
4. Include verification commands and expected signals for each phase.
|
|
|
|
### Capability Tracking
|
|
|
|
- [INVOKED] OpenDesign design-review — read `/Users/svmac/development/open-design/skills/design-review/SKILL.md`.
|
|
- [INVOKED] OpenDesign frontend-design — read `/Users/svmac/development/open-design/skills/frontend-design/SKILL.md`.
|
|
- [INVOKED] Live HTTP inspection — checked homepage, headers, sitemap, REST, contact.
|
|
- [INVOKED] Local repository inspection — checked memory, old audit, root and new redesign.
|
|
- [INVOKED] Targeted audit document editing — create current audit artifact.
|
|
|
|
## Verification
|
|
|
|
- `test -f iqon-full-audit-2026-05-19.md` exited 0.
|
|
- `rg -n "P0|P1|Phase 1|Phase 3|Open Design|WordPress 4\\.9\\.13|66 URLs|29 sitemap|3 duplicated|admin|iqnadm01" iqon-full-audit-2026-05-19.md` returned expected audit sections and evidence lines.
|
|
- `rg -n "password|парол|token|secret|Ds7|Dih|TTSQ|credential" iqon-full-audit-2026-05-19.md` exited 1, confirming credential terms/substrings are absent.
|
|
- `python3 -c` document check returned `has_purpose True`, `has_toc True`, `has_plan True`, `has_dates True`.
|